BFT AI ("BFT AI", "we", "our" or "us") is the data controller responsible for your personal data as described in this Privacy Policy.
Our primary contact for privacy matters is:
We collect personal data only when you actively provide it to us. The categories of data we may collect include:
| Category | Examples | Source |
|---|---|---|
| Identity data | First name, last name, job title | Contact form |
| Contact data | Business email address, phone number | Contact form |
| Organisational data | Company name, company size, country | Contact form |
| Communication data | Message content, enquiry type | Contact form |
| Technical data | IP address, browser type, page visited | Server logs (Netlify) |
We do not collect sensitive personal data (health, biometric, financial account details, or special category data under GDPR Article 9).
We process your personal data for the following purposes:
We do not use your data for unsolicited marketing, behavioural advertising, or profiling, without your explicit prior consent.
Where the General Data Protection Regulation (EU) 2016/679 applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to contact form enquiries | Consent (Article 6(1)(a)) — you tick the consent checkbox |
| Providing contracted services | Contract performance (Article 6(1)(b)) |
| Security and fraud prevention | Legitimate interests (Article 6(1)(f)) |
| Legal and regulatory compliance | Legal obligation (Article 6(1)(c)) |
Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of prior processing. To withdraw consent, email hello@bft-ai.com.
We do not sell, rent or trade your personal data. We may share it only with:
Any third-party service providers we engage are required to process data only on our documented instructions and implement appropriate security measures.
Our website is hosted on Netlify's infrastructure, which may involve transferring data to servers located in the United States. Where such transfers occur, we ensure they are protected by appropriate safeguards, including:
You may request a copy of the relevant safeguards by contacting us at hello@bft-ai.com.
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law.
| Data type | Retention period |
|---|---|
| Contact form submissions (no contract formed) | 12 months from submission, or until you request deletion |
| Customer account data | Duration of the contract + 3 years |
| Server / security logs | 90 days |
| Legal and financial records | As required by applicable law (typically 5–10 years) |
After the applicable retention period, data is securely deleted or anonymised.
The BFT AI website currently uses no third-party analytics cookies and no advertising or tracking pixels. We do not use Google Analytics, Meta Pixel, or similar services.
Netlify may set essential session cookies required for website functionality and security. These cookies do not track you across third-party sites and are not used for advertising.
If we introduce additional cookies in the future, we will update this policy and request your consent where required by law.
Depending on your country of residence, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at hello@bft-ai.com. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are located in the European Economic Area, you may also lodge a complaint with your national supervisory authority. In Turkey, you may contact the Kişisel Verileri Koruma Kurumu (KVKK) at kvkk.gov.tr.
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include:
No method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
BFT AI is a business-to-business (B2B) service intended solely for use by professionals and organisations. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted data to us, please contact us immediately at hello@bft-ai.com and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will indicate the "Last updated" date at the top of this page. For material changes, we will notify you via the email address on file (where applicable) or by placing a prominent notice on our website.
We encourage you to review this policy periodically.
For any privacy-related questions, requests, or concerns, please contact us:
We aim to respond to all legitimate requests within 30 calendar days. For complex requests, we may need up to 90 days and will notify you accordingly.